We provide security updates and patches for the following versions of cortex-mcp:
| Version | Supported |
|---|---|
| 1.1.x | ✅ |
| 1.0.x | ✅ |
| < 1.0 | ❌ |
The maintainers of cortex-mcp take cybersecurity and vulnerability management seriously. If you discover a potential security vulnerability (e.g., sandbox escape, SSRF, injection, authorization bypass, or crypto tampering), please follow these steps:
- Do NOT open a public GitHub issue.
- Send an email to codesphereinnovationz@gmail.com with:
- Repository name:
cortex-mcp - Summary and type of vulnerability
- Step-by-step reproduction instructions or proof-of-concept
- Potential impact on systems or data integrity
- Repository name:
- We will acknowledge receipt within 48 hours and provide a timeline for triage and resolution.
- Once a fix is verified, a patched release and coordinated security advisory will be published.
We appreciate responsible security research. If you make a good-faith effort to avoid privacy violations, data destruction, and service interruption during your research, we will not pursue legal action against you and will gladly credit you in release notes.